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Claims 

What is claimed is: 

11. A method for tracing a traffic event utilizing a firewall, comprising: 

2 (a) executing a firewall on a local computer; 

3 (b) monitoring traffic events between the local computer and a remote computer 

4 over a network utilizing the firewall; 

5 (c) displaying the traffic events utilizing the firewall; 

6 (d) tracing at least one of the traffic events utilizing the firewall; and 

7 (e) displaying a map of the trace utilizing the firewall. 



3 1 2 - Th e method as recited in claim 1 , wherein the traffic events are displayed in 
2 an event log. 



1 3. 



The method as recited in claim 2, wherein the event log identifies a time and 



2 an Internet Protocol (IP) address associated with the traffic events. 



1 4. 



The method as recited in claim 2, wherein the traffic events are organized 



2 based on times the traffic events are logged. 



1 5. 



The method as recited in claim 2, wherein the traffic events include attempts 



2 to access the local computer. 

1 6. The method as recited in claim 1 , wherein the at least one traffic event is 

2 traced in response to a user request. 



1 7. 



The method as recited in claim 1, wherein the tracing includes identifying a 



2 plurality of network segments traversed by the traffic event. 
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1 8. The method as recited in claim 7, wherein the map includes the network 

2 segments. 

1 9. The method as recited in claim 8, and further comprising displaying a 

2 plurality of views of the map . 

1 10. The method as recited in claim 9, wherein a geographical location of the 

2 network segments is displayed upon the selection of a first one of the views. 

1 11. The method as recited in claim 1 0, wherein nodes of the network segments 

2 are displayed upon the selection of a second one of the views. 

1 12. The method as recited in claim 1 1 , wherein a list of the network segments are 

2 displayed upon the selection of a third one of the views. 

1 13. A computer program product for tracing a traffic event utilizing a firewall, 

2 comprising: 

3 (a) computer code for executing a firewall on a local computer; 

4 (b) computer code for monitoring traffic events between the local computer and 

5 a remote computer over a network utilizing the firewall; 

6 (c) computer code for displaying the traffic events utilizing the firewall; 

7 (d) computer code for tracing at least one of the traffic events utilizing the 

8 firewall; and 

9 (e) computer code for displaying a map of the trace utilizing the firewall. 

1 14. The computer program product as recited in claim 13, wherein the traffic 

2 events are displayed in an event log. 

1 15. The computer program product as recited in claim 1 4, wherein the event log 

2 identifies a time and an Internet Protocol (IP) address associated with the 

3 traffic events. 
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1 16. The computer program product as recited in claim 14, wherein the traffic 

2 events are organized based on times the traffic events are logged. 

1 1 7. The computer program product as recited in claim 14, wherein the traffic 

2 events include attempts to access the local computer. 

1 18. The computer program product as recited in claim 13, wherein the at least 

2 one traffic event is traced in response to a user request. 

1 19. The computer program product as recited in claim 13, wherein the tracing 

2 includes identifying a plurality of network segments traversed by the traffic 

3 event. 

1 20. The computer program product as recited in claim 1 9, wherein the map 

2 includes the network segments. 

1 2 1 . The computer program product as recited in claim 20, and further comprising 

2 computer code for displaying a plurality of views of the map. 

1 22 . The computer program product as recited in claim 2 1 , wherein a 

2 geographical location of the network segments is displayed upon the 

3 selection of a first one of the views. 

1 23 . The computer program product as recited in claim 22, wherein nodes of the 

2 network segments are displayed upon the selection of a second one of the 

3 views. 

1 24 . The computer program product as recited in claim 23, wherein a list of the 

2 network segments are displayed upon the selection of a third one of the 

3 views. 
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1 


25. 


A system for tracing a traffic event utilizing a firewall, comprising: 


2 


(a) 


logic for executing a firewall on a local computer; 


J 


yp) 


logic for monitoring traffic events between the local computer and a remote 


4 




computer over a network utilizing the firewall; 


5 


(c) 


logic for displaying the traffic events utilizing the firewall; 


6 


(d) 


logic for tracing at least one of the traffic events utilizing the firewall; and 


7 


(e) 


logic for displaying a map of the trace utilizing the firewall. 


1 


26. 


A method for tracing a traffic event utilizing a firewall, comprising: 


2 


(a) 


executing a firewall on a local computer; 


3 


(b) 


monitoring traffic events between the local computer and a remote computer 


b 4 




over a network utilizing the firewall; 


W- 5 

%! 


(c) 


displaying the traffic events utilizing the firewall; 


jwgi 6 


(d) 


tracing at least one of the traffic events utilizing the firewall; 


MJ 7 


(e) 


displaying a geographical location of a plurality of network segments 


! £l 8. 




associated with the traffic event upon the selection of a first one of a plurality 


n 9 

•** 




of views utilizing the firewall; 


fU io 

,:asa 
i i 


(f) 


displaying a plurality of nodes of the network segments upon the selection of 


m 11 




a second one of the views utilizing the firewall; and 


Q 12 


(g) 


displaying a list of the network segments upon the selection of a third one of 


13 




the views utilizing the firewall. 


1 


27. 


A method for tracing a traffic event utilizing a firewall, comprising: 


2 


(a) 


executing a firewall on a local computer; 


3 


(b) 


monitoring traffic events between the local computer and a remote computer 


4 




over a network utilizing the firewall; 


5 


(c) 


logging the traffic events in an event log utilizing the firewall, wherein the 


6 




event log identifies a time and an Internet Protocol (IP) address associated 


7 




with the traffic events; 
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8 


(d) 


organizing the traffic events in the event log based on times the traffic events 


9 




are logged utilizing the firewall; 


10 


(e) 


displaying the traffic events in the event log utilizing the firewall; 


11 


(f) 


detecting the selection of one of the traffic event by a user; 


12 


(g) 


tracing at least one of the traffic events utilizing the firewall upon the 


13 




selection thereof, wherein the tracing identifies a plurality of network 


14 




segments traversed by the traffic event; 


15 


(h) 


detecting the selection of one of a plurality of views by the user; and 


16 


(i) 


displaying the network segments in the selected view upon the selection of 


17 




one of the views. 
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